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DETAILED ACTION 

Claim Rejections - 35 USC § 102 

1. The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this Office 
action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claims 1-18 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Kaliski, Jr. et al (US 5,854, 759). 

a. Referring to claim 1: 
i. Kaliski teaches: 

(1) transmitting an element represented in a first basis 
from a first correspondent to an intermediate processor; converting the transmitted 
element into a second basis representation by said intermediate processor to produce a 
converted element [i.e., referring to Figure 1, the basis converter 12 Is configured 
to support an export operation, that is, the conversion of an internal basis 
representation A to an external basis representation B. The externally shifted 
sequence generator 14 receives an Internal basis representation A via input 18 
(column 10, lines 27-32). The processor 22 may be a microprocessor, central 
processing unit (CPU), application-specific integrated circuit (ASIC) or any other 
suitable digital data processor. The basis converter 12 and the elements thereof 
may be configured as software modules executed by the processor 22, as 
separate dedicated hardware modules, or as various combinations of software 
and hardware. For example, both the externally shifted sequence generator 14 
and extractor 16 may be embodied partially or completely in software executed by 
the processor 22 (column 10, lines 51-60)]; 
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(3) forwarding said converted element to the first 
correspondent [i.e., Figure 13 shows an enhanced finite field arithmetic unit 160 
which includes basis conversion capabilities. The enhanced arithmetic unit 160 
includes the import basis converter 152 and is rotate/extract basis converter 154 
described in conjunction with Figure 12, as well as a finite field arithmetic unit 
162 such as the arithmetic unit 50 of Figure 4. The enhanced arithmetic unit 160 
supports finite field arithmetic operations in an internal basis as well as an 
additional basis, and may include more than the one set of basis converters 
shown, whereby "forwarding said converted element to the first correspondent" 
is considered to include in this arithmetic operations (column 16, lines 56-66)]; 
and 

(4) operating on said converted element by said first 
correspondent in a cryptographic operation [I.e., Figure 14 illustrates that the 
enhanced arithmetic unit 160 may be coupled to a cryptographic processor 170 in 
order to support cryptographic operations in multiple bases. Numerous other 
applications of the rotate/extract basis converter of Kaliski are also possible 
(column 17, lines 1-5)]. 

b. Referring to claim 2: 

i. This claim has limitations that is similar to those of claim 1 
(4), thus it is rejected with the same rationale applied against claim 1 (4) above. 

c. Referring to claim 3: 

i. Kaliski further teaches: 

(1) wherein said result is a signature [I.e., referring to 
Figure 14, "signature" Is considered to include In cryptographic processor 170]. 

d. Referring to claim 4: 

i. Kaliski further teaches: 

(1) transmitting said converted element by said 
intermediate processor to said second correspondent [i.e.. Figure 12 shows a basis 
converter 150 which includes an import basis converter 152 and a rotate/extract 
basis converter 154. The import basis converter receives a first basis 
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representation as an input, and converts the first basis representation to an 
internal basis representation using operations in the internal basis. The 
rotate/extract basis converter 154 converts the internal basis representation to a 
second basis representation (column 16, lines 46-53)]. 

e. Referring to claim 5: 

i. This claim has limitations that is similar to those of claims 1 
(4) and 4, thus it is rejected with the same rationale applied against claims 1 (4) and 4 
above. 

f. Referring to claims 6-9: 

i. Kaliski further teaches: 

(1 ) wherein said converted element is a short term public 
key and long term public key; wherein one of said correspondents is a low power 
computing device, a smartcard [i.e., many public-key cryptosystems are based on 
operations in large finite mathematical groups, and the security of these 
cryptosystems relies on the computational intractability of computing discrete 
logarithms in the underlying groups, "a short term public key and long term 
public key, and smartcard" are considered to produce via these cryptosystems 
(column 35, lines 29-32)]. 

g. Referring to claim 1 0: 

i. Kaliski further teaches: 

(1) wherein said cryptographic operation employs an 
elliptic curved scheme [i.e., many public-key cryptosystems are based on 
operations in large finite mathematical groups, and the security of these 
cryptosystems relies on the computational intractability of computing discrete 
logarithms in the underlying groups. Two major classes of such cryptosystems 
are conventional discrete logarithm cryptosystems and elliptic curve 
cryptosystems (column 35, lines 29-35)]. 

h. Referring to claim 1 1: 

i. Kaliski further teaches: 
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(1) wherein said intermediate processor is a Certifying 
Authority [i.e., referring to Figure 1, the processor 22, tliat is "a Certifying 
Authority"]. 

i. Referring to claim 12: 
i. Kaliski teaches: 

(1) transmitting an element represented in a first basis from a 
first correspondent to an intermediate processor [i.e., referring to Figure 1, the basis 
converter 12 is configured to support an export operation, that is, the conversion 
of an internal basis representation A to an external basis representation B. The 
externally shifted sequence generator 14 receives an internal basis 
representation A via input 18 (column 10, lines 27-32). The processor 22 may be 
a microprocessor, central processing unit (CPU), application-specific integrated 
circuit (ASIC) or any other suitable digital data processor. The basis converter 12 
and the elements thereof may be configured as software modules executed by 
the processor 22, as separate dedicated hardware modules, or as various 
combinations of software and hardware. For example, both the externally shifted 
sequence generator 14 and extractor 16 may be embodied partially or completely 
in software executed by the processor 22 (column 10, lines 51-60)]; 

(2) transmitting of a second element represented in a 
second basis from a second correspondent to said intermediate processor [i.e., 
referring to Figure 13, the enhanced arithmetic unit 160 supports finite field 
arithmetic operations in an internal basis as well as an additional basis, and may 
include more than the one set of basis converters shown, whereby "transmitting 
of a second element represented in a second basis from a second correspondent 
to said intermediate processor" is considered to include in these arithmetic 
operations (column 16, lines 56-66)]; 

(3) converting the transmitted first element into said 
second basis representation by said intermediate processor to produce a first converted 
element; forwarding said first converted element to said second correspondent [i.e., 
Figure 12 shows a basis converter 150 which includes an import basis converter 
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152 and a rotate/extract basis converter 154. The import basis converter receives 
a first basis representation as an input, and converts the first basis 
representation to an internal basis representation using operations in the internal 
basis. The rotate/extract basis converter 154 converts the internal basis 
representation to a second basis representation (column 16, lines 46-53)]; 

(4) converting the transmitted second element into a first 
basis representation by said intermediate processor to produce a second converted 
element; forwarding said second converted element to said first con-espondent [i.e.. 
Figure 13 shows an enhanced finite field arithmetic unit 160 which includes basis 
conversion capabilities. The enhanced arithmetic unit 160 includes the import 
basis converter 152 and is rotate/extract basis converter 154 described in 
conjunction with Figure 12, as well as a finite field arithmetic unit 162 such as the 
arithmetic unit 50 of Figure 4. The enhanced arithmetic unit 160 supports finite 
field arithmetic operations in an internal basis as well as an additional basis, and 
may include more than the one set of basis converters shown (column 16, lines 
56-66)]. 

j. Referring to claims 13-14: 

i. Kaliski further teaches: 

(1) operating on said second converted element by said 
first correspondent in a cryptographic operation to produce a result and a second result 
[i.e., referring to Figure 14, a cryptographic processor 170, that Is for "operating 
on said second converted element by said first correspondent in a cryptographic 
operation to produce a result and a second result"], 
k. Referring to claims 15-17: 

i. These claims have limitations that is similar to those of 
claims 6 and 7, thus they are rejected with the same rationale applied against claims 6 
and 7 above. 

I. Referring to claim 18: 

i. This claim has limitations that is similar to those of claim 10, 
thus it is rejected with the same rationale applied against claim 10 above. 
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3. Claims 19-24 is rejected under 35 U.S.C. 102(e) as being anticipated by 
Lenstra (US 6,446, 205). 

a. Referring to claim 19: 

i. Lenstra teaches: 

(1) representing a first field element in terms of a first 
basis; computing a first function of a first sequence of traces of said first field element; 
and using said first sequence of traces as said bit string [i.e., referring to Figure 5, at 
step 505, the value for security parameter B and mapping functions R1, R2, R3 
are obtained. At step 510, the participant's cryptosystem selects vaules for 
security parameters Bs and Bb. At step 515, the participant's cryptosystem 
randomly selects a bitstring s having Bs bits, that is for "computing a first 
function of a first sequence of traces of said first field element; and using said 
first sequence of traces as said bit string". At step 520, the participant's 
cryptosystem applies the mapping functions R1 and R2 to the concatenation of 
its identify ID and the bitstring s to obtain two positive B-bit integers a=R1(ID||s) 
and bO=R2(ID||s), that is for "first field element and second field element", and 
also Initializes an integer b1, b1=0 (column 6, lines 62-67 through column 7, lines 
1-3)]. 

b. Referring to claims 20-22: 

i. These claims have limitations that is similar to those of claim 
19, thus they are rejected with the same rationale applied against claim 19 above. 

c. Referring to claim 23: 

i. Lenstra teaches: 

(1) using said bit string as a shared secret in a 
cryptographic scheme between a first correspondent and a second correspondent [i.e., 
as shown in Figure 4, parties wishing to communicate exchange cryptographic 
data, reconstruct each other's public key data, and then use the reconstructed 
keys in cryptographic protocols, such as a signature scheme or data 
encryption/decryption scheme (column 3, lines 57-61)]. 

d. Referring to claim 24: 
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i. Lenstra teaches: 

(1) wherein said cryptographic schenne is an elliptic 
curved scheme [i.e., Lenstra's invention relates to elliptic curve cryptosystems in 
which each participant chooses its own elliptic curve, from a predetermined set 
of elliptic curve equations, and also chooses its own finite field (column 3, lines 
14-17)]. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 

all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not Identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 25-27 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Lenstra, and further in view of Kaliski, Jr. et al. 

a. ReferririQ to claims 25-27: 

i. Lenstra teaches the claimed subject matter except for: 

(1) wherein said first function is an irreducible polynomial 
of degree N; wherein said second function is an irreducible polynomial of degree N; and 
wherein said first field element is converted in terms of said second basis by finding a 
root for said polynomial for said first basis in a representation generated by said second 
basis; and evaluating said polynomial representing said first field element in said first 
basis at said root. 

ii. However, Kaliski teaches: 

(1) two common types of basis are polynomial basis and 
normal basis. In a polynomial basis, the basis elements are successive powers of an 
element .gamma., call the generator: .omega. .sub.i =.gamma..sup.i. The element 
.gamma, must satisfy certain properties, namely that the powers . gamma. .sup.O, . . . , 
.gamma.. sup. m-1 are linearly independent. A polynomial .function, of degree m, called 
the minimal polynomial of .gamma., relates the successive powers, so that 
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.gamma.. sup. m =.function..sub.m-1 .gamma. .sup.m-1 +.function..sub.m-2 
.gamma. .sup. m-2 +. . . +.function..sub.1 .gamma. +.function..sub.O. Such a polynomial 
.function, must be irreducible over the ground field GF(q) (column 2, lines 17-32). 
Furthermore, The algorithms may be used to convert from a polynomial basis to a 
normal basis, from a normal basis to a polynomial basis, from a polynomial basis with 
one generator to a polynomial with another generator, or from a normal basis with one 
generator to a normal basis with another generator, to give a few examples (column 6, 
lines 1-5). 

iii. It would have been obvious to a person having ordinary skill 
in the art at the time the invention was made to: 

(1) include the polynomial basis representation as in 
Lenstra's cryptosystem since it is a common choice of basis for representing elements 
of the finite field (column 1, lines 22-23 of KallskI). 

iv. The ordinary skilled person would have been motivated to: 
(1) include the polynomial basis representation as in 

Lenstra's cryptosystem for a variety of reasons, including cost, performance, and 
compatibility with other applications, implementations of GF(2.sup.m) arithmetic vary in 
their choice of basis (column 1, lines 25-28 of KallskI). 

Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Vanstone et al (US 6, 141, 420) discloses an elliptic curve 
encryption system represents coordinates of a point on the curve as a vector of binary 
digits in a normal basis representation in F.sub.2.spsb.m. A key is generated from 
multiple additions of one or more points in a finite field (see abstract). 

b. Yin et al (US 6, 389, 442 B1) The invention provides improved 
techniques for multiplication of signals represented in a normal basis of a finite field. An 
illustrative embodiment includes a first rotator which receives a first input signal 
representative of a first normal basis field element (a.sub.O a.sub.1 . . . a.sub.m-1 ), and 



Appncation/Control Number: 09/933,720 Page 10 

Art Unit: 2135 

a second rotator which receives a second input signal representative of a second 
normal basis field element (b.sub.O b.sub.1 . . . b.sub.m-1) (see abstract). 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Thanhnga (Tanya) Truong 
whose telephone number is 703-305-0327. 

If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Kim Vu can be reached on 703-305-4393. The fax and 
phone numbers for the organization where this application or proceeding is assigned is 
703-872-9306. 

Any inquiry of a general nature or relating to the status of this 
application or proceeding should be directed to the receptionist whose telephone 
number is 703-305-3900. 
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